CVE-2008-5997

2009-01-2815:00:00

mitre

www.cve.org

6.8 Medium

AI Score

Confidence

High

0.008 Low

EPSS

Percentile

81.3%

JSON

Absolute path traversal vulnerability in admin/fileKontrola/browser.asp in Omnicom Content Platform (OCP) 2.0 allows remote attackers to list arbitrary directories via a full pathname in the root parameter.

References

packetstormsecurity.org/0809-exploits/omnicom-traverse.txt

www.securityfocus.com/bid/31338

exchange.xforce.ibmcloud.com/vulnerabilities/45394